Solved

Port mirroring 2nd Nic, sles 10, running VMware Server.

Posted on 2008-06-11
7
1,178 Views
Last Modified: 2013-12-05
I have a Cisco catalyst 2950 that I have setup with Port Mirroring, and I want to connect the port to my 2nd nic card on my SLES 10 server running VMware server.

How do I configure SUSE to pass the port Mirroring information to VMware server, so I can run a Ubuntu server vm guest with Snort and monitor that port.
0
Comment
Question by:lundrog
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
7 Comments
 

Expert Comment

by:palekar
ID: 21762491
Hi,
  As I get it, you have a host server as SLES 10 and you wish to have Ubuntu  Virtual Machine with SNort running.

 You have solution depending on what networking you use for the virtual machine.

(1) If you have used the "Bridged Connection", then you already have a IP from the router, which you can use for monitoring

(2) If you have used "Nat Connection".. you can use the nat config that is shipped with vmware.. to do the port forwarding. Here is a example: http://www.howtogeek.com/howto/vmware/allow-access-to-a-vmware-virtual-machinenat-from-another-computer/

(3) If you use host-only networking.. you will have to put the port forwarding using iptables or firewall on your host.

As far as the second NIC is concerned.. you have to choose the second nic for networking on your vmware network settings.

More info regarding your setup and ports.. will be required to give you a detailed solution
0
 
LVL 3

Author Comment

by:lundrog
ID: 21763393
I have Bridged networking setup, and the Ubuntu Snort Guest VM will have it's own IP Address.
So i just plug the RJ45 in to the 2nd nic, which is connected to the port 23 on the switch,  which is mirroring port 22 on switch, and I do nothing in SUSE to configure it?

Do i have to use any switches / configuration in my VM Guest ( Ubuntu) config file to setup it to see the port mirrored port?

For snort (VMware Guest, Ubuntu)  to have a network address I would configure eth0 in ( VMware Guest, Ubuntu) to point to eth0 in SUSE ( VMware host) and for Snort, ( VMware Guest, Ubuntu) to Sniff, I configure eth1(VMware Guest, Ubuntu) to point to eth1 in SUSE ( VMware host), which would be the port mirroring port ?
0
 
LVL 3

Author Comment

by:lundrog
ID: 21857442
I had to do "ifconfig eth1 -promisc" then "ifconfig eth1" up on both the host system and the guest


You would have to do this for every boot.


Unless anyone knows how to do this automatically.


Thanks
0
 
LVL 3

Author Comment

by:lundrog
ID: 22107307
I got the answer I needed on this post

http://communities.vmware.com/message/978721

Up to you how you assign points.
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 22134650
PAQed with points refunded (125)

Computer101
EE Admin
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If we need to check who deleted a Virtual Machine from our vCenter. Looking this task in logs can be painful and spend lot of time, so the best way to check this is in the vCenter DB. Just connect to vCenter DB(default DB should be VCDB and using…
In this step by step tutorial with screenshots, we will show you HOW TO: Enable SSH Remote Access on a VMware vSphere Hypervisor 6.5 (ESXi 6.5). This is important if you need to enable SSH remote access for additional troubleshooting of the ESXi hos…
Teach the user how to delpoy the vCenter Server Appliance and how to configure its network settings Deploy OVF: Open VM console and configure networking:
Teach the user how to rename, unmount, delete and upgrade VMFS datastores. Open vSphere Web Client: Rename VMFS and NFS datastores: Upgrade VMFS-3 volume to VMFS-5: Unmount VMFS datastore: Delete a VMFS datastore:

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question